9678948e21027247d80264c524f3b88e71a83393e15dd9e42b20b9bda9759603 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5eac2c707c748434b14993582f62a679_JaffaCakes118
Size

16KB
Sample

240720-cvlvxsscqp
MD5

5eac2c707c748434b14993582f62a679
SHA1

df603f3d98ed574a72c54415b22be65cb9cf6cf2
SHA256

9678948e21027247d80264c524f3b88e71a83393e15dd9e42b20b9bda9759603
SHA512

b02143f296e4efc2db698fd8bffc48144712259ba1cb6c4520377e9263dec1cc2f19a2cefbf3430d7be524e6a38f31d3a2e9bc66aadcad4c8295af3cad3a0e10
SSDEEP

192:ofzy2j9N/lfXNnITBrnOHbFGOPx1Q5ubiOPqr/M8HyaoVdmnYQdR:Yzy25NF9nc5nQJ1Q5ubiND8Vdmh

Score

10^/10

evasion execution

Malware Config

Targets

- Target
  
  5eac2c707c748434b14993582f62a679_JaffaCakes118
- Size
  
  16KB
- MD5
  
  5eac2c707c748434b14993582f62a679
- SHA1
  
  df603f3d98ed574a72c54415b22be65cb9cf6cf2
- SHA256
  
  9678948e21027247d80264c524f3b88e71a83393e15dd9e42b20b9bda9759603
- SHA512
  
  b02143f296e4efc2db698fd8bffc48144712259ba1cb6c4520377e9263dec1cc2f19a2cefbf3430d7be524e6a38f31d3a2e9bc66aadcad4c8295af3cad3a0e10
- SSDEEP
  
  192:ofzy2j9N/lfXNnITBrnOHbFGOPx1Q5ubiOPqr/M8HyaoVdmnYQdR:Yzy25NF9nc5nQJ1Q5ubiND8Vdmh
Score

10^/10

evasion execution
- Disables service(s)
  evasion execution
- Stops running service(s)
  evasion execution
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionexecution

behavioral2

evasionexecution